[AGENCY] - City of Chicago



Policy # |Title |Creator |Date Created |Last Revision Date |Reviewers | |2011 - 1 |Identity Protection Policy |Office of Compliance |May 10, 2011 |May 2, 2012 |DOL, Bd. Of Ethics | |

City of Chicago

Identity Protection Policy

1) Purpose

The City of Chicago (the “City”) adopts this Identity Protection Policy pursuant to the Identity Protection Act, 5 ILCS 179/1 et seq. The Identity Protection Act (the “Act”) requires each local and State government agency in Illinois to draft, approve, and implement an Identity Protection Policy to ensure the confidentiality and integrity of Social Security numbers (“SSNs”) that agencies collect, maintain, and use.

The purpose of this Policy is to set forth the procedures and restrictions that must be observed by all City employees regarding the use and availability of SSNs belonging to City employees and the public. This Policy is effective immediately.

2) Access to Social Security Numbers

a) Limited access: Only those City employees who are required to use or handle information or documents that contain SSNs in the course of performing their duties will have access to such information or documents.

b) Training: All City employees who have access to SSNs will receive training on the proper handling of information that contains SSNs.

3) Displaying or Printing SSNs

The City shall not:

a) Publicly post or publicly display in any manner an individual’s SSN. “Publicly post” or “publicly display” means to intentionally communicate or otherwise intentionally make available to the general public.

b) Print an individual’s SSN on any card required for an individual to access products or services provided by the City.

c) Require an individual to transmit a SSN over the Internet, unless the connection is secure or the SSN is encrypted.

d) Print an individual’s SSN on any materials that are mailed to the individual through the U.S. Postal Service, any private mail service, electronic mail, or any similar method of delivery, unless State or federal law requires the SSN to be on the document to be mailed.

SSNs may be included in applications and forms sent by mail, including but not limited to, any material mailed in connection with the administration of the Unemployment Insurance Act, any material mailed in connection with any tax administered by the Department of Revenue, and documents sent as part of an application or enrollment process or to establish, amend, or terminate an account, contract, or policy or to confirm the accuracy of the SSN.

A SSN that is permissibly mailed must not be printed, in whole or in part, on a postcard or other mailer that does not require an envelope, or be visible on an envelope without the envelope having been opened.

4) Collection, Use or Disclosure of SSNs

The City shall not:

a) Collect, use, or disclose SSNs from individuals unless:

i) required to do so under State or federal law, rules, or regulations, or the collection, use, or disclosure of the SSN is otherwise necessary for the performance of the City’s duties and responsibilities;

ii) the need and purpose for the SSN is documented before collection of the Social Security number; and

iii) the SSN collected is relevant to the documented need and purpose.

b) Require an individual to use his or her SSN to access an Internet website.

c) Use the SSN for any purpose other than the purpose for which it was collected.

d) Exceptions: The prohibitions in Sections 4a) – 4 c) of this Policy do not apply in the following circumstances:

The disclosure of SSNs to agents, employees, contractors, or subcontractors of a governmental entity or disclosure by a governmental entity to another governmental entity or its agents, employees, contractors, or subcontractors, provided that:

▪ disclosure is necessary in order for the entity to perform its duties and responsibilities; and

▪ if disclosing to a contractor or subcontractor, prior to such disclosure, the governmental entity first receives from the contractor or subcontractor a copy of the contractor's or subcontractor's policy that sets forth how the requirements imposed under this Act on a governmental entity to protect an individual's SSN will be achieved.

i) The disclosure of SSNs pursuant to a court order, warrant, or subpoena.

ii) The collection, use, or disclosure of SSNs in order to ensure the safety of: State and local government employees; persons committed to correctional facilities, local jails, and other law-enforcement facilities or retention centers; wards of the State; and all persons working in or visiting a State or local government agency facility.

iii) The collection, use, or disclosure of SSNs for internal verification or administrative purposes.

iv) The disclosure of SSNs by a State agency to any entity for the collection of delinquent child support or of any State debt or to a governmental agency to assist with an investigation or the prevention of fraud.

v) The collection or use of SSNs to investigate or prevent fraud, to conduct background checks, to collect a debt, to obtain a credit report from a consumer reporting agency under the federal Fair Credit Reporting Act, to undertake any permissible purpose that is enumerated under the federal Gramm Leach Bliley Act, or to locate a missing person, a lost relative, or a person who is due a benefit, such as a pension benefit or an unclaimed property benefit.

5) Statement of Purpose for Collection of SSNs

Whenever an individual is asked to provide a SSN to the City, the City shall provide that individual with a statement of the purpose or purposes for which the City is collecting and using the SSN. The City shall also provide the statement of purpose upon request. A sample Statement of Purpose is attached to this Policy.

6) Requirement to Redact Social Security Numbers

a) Public inspection and copying of information: The City shall comply with the provisions of any other State law with respect to allowing the public inspection and copying of information or documents containing all or any portion of an individual’s SSN. The City shall redact SSNs from the information or documents before allowing the public inspection or copying of the information or documents.

b) Manner of collecting SSNs: When collecting SSNs, the City shall request each SSN in a manner that makes the SSN easily redacted if required to be released as part of a public records request.

“Redact” means to alter or truncate data so that no more than five sequential digits of a SSN are accessible as part of personal information.

7) Department Responsibilities

Each department head must ensure that the procedures and restrictions stated in this Policy are followed by department employees, and that the requirements of Act as described in this Policy, are met.

8) Monitoring

All departments are subject to auditing of any city policy with or without prior notice. As stated in Chapter 2-26 of the Chicago Municipal Code, it is the duty of every officer, employee, department, and agency of the city to cooperate with the Board of Ethics, and every department must make its premises, equipment, personnel, books, records and papers readily available.

9) Compliance

Penalties for a violation of this policy include disciplinary action up to and including termination and/or criminal prosecution as provided in the Identity Protection Act. (5 ILCS 179/45).

CITY OF CHICAGO

STATEMENT OF PURPOSE

FOR THE COLLECTION OF SOCIAL SECURITY NUMBERS

The Illinois Identity Protection Act, 5 ILCS 179/1 et seq., requires every local and state government agency to have an Identity Protection Policy and to provide a Statement of Purpose explaining why the agency is collecting and using an individual’s Social Security Number (“SSN”). The City of Chicago is providing you with this Statement of Purpose because you have been asked to provide your SSN or because you requested a copy.

Why have you been asked for your SSN?

You are being asked for your SSN for one or more of the following permissible reasons:

• Identity verification

• Fraud prevention

• Law enforcement investigation

• Background check

• Child support collection

• Billing, payment or debt collection

• Employment-related administrative purposes

• Pursuant to a court order, warrant or subpoena

• City license application

• To comply with State or federal law, rules or regulations or because the City agency making the request requires the SSN to perform its duties and responsibilities

What does the City of Chicago do with your SSN?

The City will only use your SSN for the purpose for which it was collected.

The City will not:

• Sell, lease, loan, trade or rent your SSN to a third party for any purpose;

• Publicly post or display your SSN;

• Print your SSN on any card required to access City services;

• Require you to transmit your SSN over the Internet unless the connections secure or your SSN is encrypted; or

• Print your SSN on any materials that are being mailed to you unless State or federal law requires that number to be on such documents or unless the City is confirming the accuracy of your SSN. If mailed, your SSN will not be visible without opening the envelope in which it has been mailed.

If you have questions or comments about this Statement of Purpose, write to:

City of Chicago Board of Ethics

740 North Sedgwick Street

Suite 500

Chicago, Illinois 60654

................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download